$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa384edc-a611-3e15-9f11-52686901fc5a.roa File: fa384edc-a611-3e15-9f11-52686901fc5a.roa (raw, json) Hash identifier: fLSX7zgEr2WZvWkx0PggQ9tI21y0Puo4Rh1zfs9dkqw= Subject key identifier: 25:0B:F7:E2:59:09:76:F1:DA:4B:A6:0F:2C:B1:55:60:FE:D6:22:73 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285847E62A7C919401091B05290080 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa384edc-a611-3e15-9f11-52686901fc5a.roa Signing time: Sat 16 Nov 2024 14:00:41 +0000 ROA not before: Sat 16 Nov 2024 14:00:41 +0000 ROA not after: Fri 14 Feb 2025 14:00:41 +0000 asID: 7155 IP address blocks: 172.243.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e6:2a:7c:91:94:01:09:1b:05:29:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Nov 16 14:00:41 2024 GMT Not After : Feb 14 14:00:41 2025 GMT Subject: CN=02c12eb4-7c2c-41d9-8136-86db5be34eed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e0:06:e8:d1:07:97:a7:2c:8a:35:e5:0c:29: a3:70:6d:66:53:1a:92:d9:18:5b:74:d6:ed:a0:b1: 76:e7:31:d7:b5:45:20:99:d8:33:50:e0:a4:b0:22: 05:51:10:53:a2:78:02:32:63:dd:7f:ee:d7:ba:65: 9d:6d:72:f9:b9:16:15:66:5d:d7:45:58:c3:80:62: c0:a9:6f:59:b8:5a:3a:86:5a:65:2e:08:4f:db:44: 2a:cf:bb:ee:fa:9c:4a:f7:d3:31:96:fe:0b:d9:ee: 09:6b:6f:f2:50:3e:37:a1:c7:aa:50:88:12:b0:48: 2c:c1:ff:76:30:c3:ac:92:ef:8b:7b:b9:d3:d7:12: 1f:e3:3a:51:51:3e:99:f7:aa:e2:e9:5a:c5:4c:3c: a3:c3:15:e4:e2:db:d6:31:75:d4:3e:b0:50:8d:6d: 60:38:b9:91:01:3b:de:6b:5c:b5:9a:34:a4:05:73: 95:fa:20:cd:e2:7d:a3:49:e4:17:4b:de:2b:8a:e0: 9f:1e:4c:ac:03:1c:97:bd:b3:78:71:3c:c5:a9:7e: 94:cd:b2:37:fd:83:48:66:6b:57:cf:95:33:58:5a: ec:fe:88:90:1e:26:f8:b8:56:d7:c6:62:2a:dc:89: 65:ce:df:5b:da:a2:a9:28:6a:a5:16:3c:cc:71:b0: ba:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:0B:F7:E2:59:09:76:F1:DA:4B:A6:0F:2C:B1:55:60:FE:D6:22:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa384edc-a611-3e15-9f11-52686901fc5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:fa:5e:f8:1e:82:53:3d:ab:26:4c:a8:fb:17:e3:0d:4c:f0: aa:57:45:0e:19:85:b6:ec:9d:b9:b0:f3:b7:ff:52:7a:06:4c: 5f:ee:c3:af:82:20:aa:bd:99:d3:48:53:2c:80:2a:3d:38:24: f9:4a:b2:04:6a:e5:86:9f:31:b3:15:80:62:3a:cd:95:f8:09: 58:aa:43:ae:c9:1f:5a:51:38:6e:7a:d9:f5:ae:28:09:d1:2b: a3:c0:4c:78:16:25:a9:f7:63:35:e4:3d:77:7a:70:62:d6:bf: 7a:66:b5:de:e9:56:85:0b:45:22:5f:df:61:9b:ef:fa:58:a0: f9:ed:14:62:61:bf:7c:88:03:77:16:cb:34:89:f4:a0:ab:13: bf:25:77:72:1b:22:0a:74:01:1f:65:3c:e9:19:12:06:f0:5e: 69:c4:b8:bc:1e:c2:32:5d:3e:49:b8:44:32:28:63:c3:b3:0e: 8b:3f:e0:04:c3:b2:63:3a:4b:4d:7a:3b:7d:69:ba:2a:e1:4f: 22:cf:dc:ba:24:95:b0:f2:d9:64:31:6f:54:e4:56:7f:fc:3a: dd:87:e8:30:76:5e:60:5e:cf:2a:8c:9e:44:ec:47:14:ae:f1: 35:11:cf:f7:3c:c8:a7:3a:1e:43:37:90:2e:bd:cf:92:60:d5: b1:5c:fe:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKnyRlAEJGwUpAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk MDJjMTJlYjQtN2MyYy00MWQ5LTgxMzYtODZkYjViZTM0ZWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveAG6NEHl6csijXlDCmjcG1mUxqS2RhbdNbt oLF25zHXtUUgmdgzUOCksCIFURBTongCMmPdf+7XumWdbXL5uRYVZl3XRVjDgGLA qW9ZuFo6hlplLghP20Qqz7vu+pxK99Mxlv4L2e4Ja2/yUD43oceqUIgSsEgswf92 MMOsku+Le7nT1xIf4zpRUT6Z96ri6VrFTDyjwxXk4tvWMXXUPrBQjW1gOLmRATve a1y1mjSkBXOV+iDN4n2jSeQXS94riuCfHkysAxyXvbN4cTzFqX6UzbI3/YNIZmtX z5UzWFrs/oiQHib4uFbXxmIq3Illzt9b2qKpKGqlFjzMcbC6HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUL9+JZCXbx2kumDyyxVWD+1iJzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZmEzODRlZGMtYTYxMS0z ZTE1LTlmMTEtNTI2ODY5MDFmYzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAX6XvgeglM9qyZMqPsX4w1M8KpXRQ4Zhbbsnbmw87f/UnoGTF/uw6+C IKq9mdNIUyyAKj04JPlKsgRq5YafMbMVgGI6zZX4CViqQ67JH1pROG562fWuKAnR K6PATHgWJan3YzXkPXd6cGLWv3pmtd7pVoULRSJf32Gb7/pYoPntFGJhv3yIA3cW yzSJ9KCrE78ld3IbIgp0AR9lPOkZEgbwXmnEuLwewjJdPkm4RDIoY8OzDos/4ATD smM6S016O31puirhTyLP3LoklbDy2WQxb1TkVn/8Ot2H6DB2XmBezyqMnkTsRxSu 8TURz/c8yKc6HkM3kC69z5Jg1bFc/iY= -----END CERTIFICATE-----Generated at Fri Nov 22 02:12:46 2024 by rpki-client on console-fra.rpki-client.org